Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in astrono2mio (PyPI) MAL-2025-1962 | Malicious | Not scored | 08 Feb, 2025 | PyPI astrono2mio |
Malicious release: Malicious code in astronomio (PyPI) MAL-2025-1963 | Malicious | Not scored | 08 Feb, 2025 | PyPI astronomio |
Malicious release: Malicious code in astronomios (PyPI) MAL-2025-1964 | Malicious | Not scored | 08 Feb, 2025 | PyPI astronomios |
Malicious release: Malicious code in updateuuid4 (PyPI) MAL-2025-191917 | Malicious | Not scored | 08 Feb, 2025 | PyPI updateuuid4 |
xml2rfc has file inclusion irregularities GHSA-432c-wxpg-m4q3 | Medium | Not scored | 07 Feb, 2025 | PyPI xml2rfc |
vLLM uses Python 3.12 built-in hash() which leads to predictable hash collisions in prefix cache CVE-2025-25183, GHSA-rm76-4mrf-v9r8, PYSEC-2025-62 | Low | 0.2% | 06 Feb, 2025 | PyPI vllm |
Mitmweb API Authentication Bypass Using Proxy Server CVE-2025-23217, GHSA-wg33-5h85-7q5p, PYSEC-2026-1630 | High | 0.9% | 06 Feb, 2025 | PyPI mitmproxy |
Malicious release: Malicious code in inkpy-jinja (PyPI) MAL-2025-191766 | Malicious | Not scored | 05 Feb, 2025 | PyPI inkpy-jinja |
Malicious release: Malicious code in lightgboost (PyPI) MAL-2025-191781 | Malicious | Not scored | 05 Feb, 2025 | PyPI lightgboost |
Malicious release: Malicious code in nflx-metaflow (PyPI) MAL-2025-1984 | Malicious | Not scored | 05 Feb, 2025 | PyPI nflx-metaflow |
Malicious release: Malicious code in pxz (PyPI) MAL-2025-1986 | Malicious | Not scored | 05 Feb, 2025 | PyPI pxz |
MobSF Local Privilege Escalation CVE-2025-24805, GHSA-79f6-p65j-3m2m, PYSEC-2026-1667 | High | 0.4% | 05 Feb, 2025 | PyPI mobsf |
MobSF Partial Denial of Service (DoS) CVE-2025-24804, GHSA-jrm8-xgf3-fwqr, PYSEC-2026-1674 | High | 0.5% | 05 Feb, 2025 | PyPI mobsf |
MobSF Stored Cross-Site Scripting (XSS) CVE-2025-24803, GHSA-cxqq-w3x5-7ph3, PYSEC-2026-1673 | High | 0.4% | 05 Feb, 2025 | PyPI mobsf |
CKAN has an XSS vector in user uploaded images in group/org and user profiles CVE-2025-24372, GHSA-7pq5-qcp6-mcww, PYSEC-2026-1250 | High | 0.5% | 05 Feb, 2025 | PyPI ckan |
Malicious release: Malicious code in hellohackers (PyPI) MAL-2025-1977 | Malicious | Not scored | 05 Feb, 2025 | PyPI hellohackers |
Malicious release: Malicious code in farooq4321 (PyPI) MAL-2025-1975 | Malicious | Not scored | 04 Feb, 2025 | PyPI farooq4321 |
Malicious release: Malicious code in requests-x64 (PyPI) MAL-2025-1992 | Malicious | Not scored | 04 Feb, 2025 | PyPI requests-x64 |
lunasvg v3.0.1 was discovered to contain a segmentation violation via the component gray_find_cell CVE-2024-55456, PYSEC-2025-127 | Medium | 0.4% | 03 Feb, 2025 | PyPI lunasvg |
Malicious release: Malicious code in xmsgpy (PyPI) MAL-2025-1009 | Malicious | Not scored | 03 Feb, 2025 | PyPI xmsgpy |
Malicious release: Malicious code in web3-eth (PyPI) MAL-2025-1006 | Malicious | Not scored | 03 Feb, 2025 | PyPI web3-eth |
Malicious release: Malicious code in utils-hex (PyPI) MAL-2025-1001 | Malicious | Not scored | 03 Feb, 2025 | PyPI utils-hex |
Malicious release: Malicious code in utils-pencaws (PyPI) MAL-2025-1002 | Malicious | Not scored | 03 Feb, 2025 | PyPI utils-pencaws |
Malicious release: Malicious code in utils-eth (PyPI) MAL-2025-1000 | Malicious | Not scored | 03 Feb, 2025 | PyPI utils-eth |
Malicious release: Malicious code in tonki (PyPI) MAL-2025-996 | Malicious | Not scored | 03 Feb, 2025 | PyPI tonki |
Malicious release: Malicious code in tonvia (PyPI) MAL-2025-997 | Malicious | Not scored | 03 Feb, 2025 | PyPI tonvia |
Malicious release: Malicious code in toneo (PyPI) MAL-2025-995 | Malicious | Not scored | 03 Feb, 2025 | PyPI toneo |
Malicious release: Malicious code in tan1 (PyPI) MAL-2025-992 | Malicious | Not scored | 03 Feb, 2025 | PyPI tan1 |
Malicious release: Malicious code in tan1-0 (PyPI) MAL-2025-993 | Malicious | Not scored | 03 Feb, 2025 | PyPI tan1-0 |
Malicious release: Malicious code in shoots-bynet (PyPI) MAL-2025-986 | Malicious | Not scored | 03 Feb, 2025 | PyPI shoots-bynet |
Malicious release: Malicious code in shelley (PyPI) MAL-2025-983 | Malicious | Not scored | 03 Feb, 2025 | PyPI shelley |
Malicious release: Malicious code in shinel (PyPI) MAL-2025-984 | Malicious | Not scored | 03 Feb, 2025 | PyPI shinel |
Malicious release: Malicious code in sajodecrypto (PyPI) MAL-2025-981 | Malicious | Not scored | 03 Feb, 2025 | PyPI sajodecrypto |
Malicious release: Malicious code in sajadnewninja (PyPI) MAL-2025-978 | Malicious | Not scored | 03 Feb, 2025 | PyPI sajadnewninja |
Malicious release: Malicious code in sajadninja (PyPI) MAL-2025-979 | Malicious | Not scored | 03 Feb, 2025 | PyPI sajadninja |
Malicious release: Malicious code in sajadninja-sajad (PyPI) MAL-2025-980 | Malicious | Not scored | 03 Feb, 2025 | PyPI sajadninja-sajad |
Malicious release: Malicious code in sajadnewenc (PyPI) MAL-2025-977 | Malicious | Not scored | 03 Feb, 2025 | PyPI sajadnewenc |
Malicious release: Malicious code in reqest-dexfree (PyPI) MAL-2025-967 | Malicious | Not scored | 03 Feb, 2025 | PyPI reqest-dexfree |
Malicious release: Malicious code in pyethereum2345 (PyPI) MAL-2025-957 | Malicious | Not scored | 03 Feb, 2025 | PyPI pyethereum2345 |
Malicious release: Malicious code in pylint-redis (PyPI) MAL-2025-958 | Malicious | Not scored | 03 Feb, 2025 | PyPI pylint-redis |
Malicious release: Malicious code in pyethereum (PyPI) MAL-2025-956 | Malicious | Not scored | 03 Feb, 2025 | PyPI pyethereum |
Malicious release: Malicious code in prime-math (PyPI) MAL-2025-952 | Malicious | Not scored | 03 Feb, 2025 | PyPI prime-math |
Malicious release: Malicious code in petace (PyPI) MAL-2025-950 | Malicious | Not scored | 03 Feb, 2025 | PyPI petace |
Malicious release: Malicious code in newencsajad (PyPI) MAL-2025-946 | Malicious | Not scored | 03 Feb, 2025 | PyPI newencsajad |
Malicious release: Malicious code in lransrlasn (PyPI) MAL-2025-943 | Malicious | Not scored | 03 Feb, 2025 | PyPI lransrlasn |
Malicious release: Malicious code in langer-update (PyPI) MAL-2025-941 | Malicious | Not scored | 03 Feb, 2025 | PyPI langer-update |
Malicious release: Malicious code in hhxy (PyPI) MAL-2025-932 | Malicious | Not scored | 03 Feb, 2025 | PyPI hhxy |
Malicious release: Malicious code in fgh (PyPI) MAL-2025-924 | Malicious | Not scored | 03 Feb, 2025 | PyPI fgh |
Malicious release: Malicious code in eth-web3 (PyPI) MAL-2025-921 | Malicious | Not scored | 03 Feb, 2025 | PyPI eth-web3 |
Malicious release: Malicious code in devilfree (PyPI) MAL-2025-917 | Malicious | Not scored | 03 Feb, 2025 | PyPI devilfree |